0f9adcb460fbef6691301f045cd0bb4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f9adcb460fbef6691301f045cd0bb4a_JaffaCakes118
Size

299KB
MD5

0f9adcb460fbef6691301f045cd0bb4a
SHA1

aa7854c9f8e7b5cb72a99e01617e791081e25381
SHA256

61c52272a1774b2ceefc997a5b2c1865277d9fc26c9a9a7fd343a7a5c9182d9d
SHA512

cf894abcb0867ee297965ad881ce845d0277122ec47aae4aa6f9064d48e307af2cfe6ab613916632c3c1d82516c940cc5f11be0d6a3b5e45aea72ee58967c11c
SSDEEP

6144:FQqg29xMgEqbv3dojcEXz1gObeeG02npqrksaDlY4v5ddeL:FH99x8Gd0c8z15bfG0jktlXRd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f9adcb460fbef6691301f045cd0bb4a_JaffaCakes118

Files

0f9adcb460fbef6691301f045cd0bb4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9965c4cc8aa5e6fc5ba61fcae24266e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
CloseHandle
CreateFileA
lstrlenA
GetCommandLineW
GetCurrentDirectoryW
ResetEvent
CreateThread
GetTimeFormatA
HeapCreate
GetModuleHandleA
GetTickCount
FindVolumeClose
GetComputerNameA
UnmapViewOfFile
GetSystemTime
Sleep
LoadLibraryExW
LocalFree
LocalUnlock

user32

SetFocus
GetDlgItem
GetKeyState
CallWindowProcA
DrawEdge
CheckRadioButton
GetDC
CreateWindowExA
DrawMenuBar
FillRect
IsWindow
GetComboBoxInfo
DispatchMessageA

cryptui

CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
WizardFree
CryptUIDlgSelectCA
LocalEnroll

hdwwiz.cpl

AddHardwareWizard

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ